Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: fw9IQmZMVdAEEkx9JLbuFsK4Q8ql/+ZJXxZj3WVmtEI=
Subject key identifier: E9:5A:45:A8:1B:64:93:FB:D2:02:59:DF:BB:20:70:08:F1:57:D1:65
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0196C34B910A9DC0B24B4AD7CF826AABCE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0C08
Signing time: Mon 12 May 2025 07:00:31 +0000
Manifest this update: Mon 12 May 2025 07:00:31 +0000
Manifest next update: Tue 13 May 2025 07:00:31 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: mOt2LB915diCW/4QZ2uvVboBavhEY9WGxdsdlA1Gqik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:91:0a:9d:c0:b2:4b:4a:d7:cf:82:6a:ab:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: May 12 07:00:31 2025 GMT
Not After : May 13 07:00:31 2025 GMT
Subject: CN=e95a45a81b6493fbd20259dfbb207008f157d165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:6e:ea:a2:d9:fd:ce:e3:eb:5e:c5:84:d6:
30:bb:ce:bf:1e:26:ab:c9:ec:a7:83:82:6b:77:77:
50:65:6d:56:3b:9e:d8:94:b7:4e:5a:56:3f:e3:4e:
b8:b8:20:4a:16:2d:26:d9:68:c5:a5:1f:92:d6:f9:
70:51:b2:1f:c7:90:bc:3c:9a:cc:21:e8:e6:61:e8:
fc:16:f9:10:bb:7b:c9:04:d1:06:5b:1d:e7:e4:e8:
15:99:85:40:64:78:b9:46:f8:d7:8a:5c:b7:b3:b5:
45:b6:e7:c8:3c:fe:8e:76:86:21:94:d6:59:43:43:
e5:b9:94:ea:95:9b:a5:52:a1:7a:ac:ec:a8:87:2b:
7c:b3:81:0d:0b:c7:99:fb:86:bd:a8:72:c5:b1:d5:
9e:89:d1:69:96:64:e4:8a:cf:22:ae:04:b5:12:66:
48:0f:49:76:37:14:ee:52:ab:af:c0:46:80:37:9e:
12:21:40:d2:17:8e:05:d3:8c:5d:da:75:ad:93:b6:
89:94:25:e9:00:e6:e9:c1:02:bb:0a:da:53:dd:d5:
37:0d:8c:d2:81:c9:4b:b1:37:a3:d9:61:60:94:d8:
6e:65:a8:34:e0:b1:3a:19:5e:88:05:14:06:7c:ff:
1f:48:25:9a:42:8c:5f:a3:54:55:14:9f:14:2c:66:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5A:45:A8:1B:64:93:FB:D2:02:59:DF:BB:20:70:08:F1:57:D1:65
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:b3:92:d2:e4:8c:d3:57:ef:3b:1e:be:46:50:4e:0e:c7:
b2:3e:7e:e4:e1:05:15:78:b3:3c:2f:b1:24:95:9c:a1:a7:3b:
9d:1e:75:11:99:60:ca:66:47:86:38:25:f1:23:c5:64:6a:fd:
38:27:9b:a1:d1:2b:90:77:58:2a:42:a8:0f:77:19:4d:a8:24:
50:ed:9b:6a:89:cf:26:11:69:6c:56:83:d8:4d:d7:a1:49:1e:
27:4f:a5:cf:88:56:04:51:1d:1e:de:3f:04:34:a5:e0:af:b8:
d4:40:97:fa:f0:9f:03:7e:13:48:21:d7:8c:c0:a5:c9:9d:ed:
58:61:86:ed:23:f2:df:02:4a:0b:90:0d:5d:16:8f:55:1a:2f:
c4:88:51:2d:64:3c:88:ba:f1:a1:db:63:a3:b6:56:3c:45:63:
83:e0:b1:1c:4c:a7:b0:53:a5:68:03:a5:f4:0f:82:8f:69:15:
ee:9c:9e:4f:27:0d:ed:7a:c3:7d:55:92:4b:e9:32:48:5a:d2:
f6:2f:27:85:c2:9e:98:d1:f4:79:12:a9:45:4e:26:43:78:52:
69:7c:cf:ba:0d:cb:28:24:60:43:33:9e:5f:7b:b3:2a:d5:16:
27:f8:2a:a8:b6:40:c0:c7:4c:30:94:ba:e6:1a:9f:ea:d4:e5:
f5:1d:18:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS5EKncCyS0rXz4Jqq85wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjUwNTEyMDcwMDMxWhcNMjUwNTEzMDcwMDMxWjAzMTEwLwYDVQQD
EyhlOTVhNDVhODFiNjQ5M2ZiZDIwMjU5ZGZiYjIwNzAwOGYxNTdkMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFhu6qLZ/c7j617FhNYwu86/Hiar
yeyng4Jrd3dQZW1WO57YlLdOWlY/4064uCBKFi0m2WjFpR+S1vlwUbIfx5C8PJrM
IejmYej8FvkQu3vJBNEGWx3n5OgVmYVAZHi5RvjXily3s7VFtufIPP6OdoYhlNZZ
Q0PluZTqlZulUqF6rOyohyt8s4ENC8eZ+4a9qHLFsdWeidFplmTkis8irgS1EmZI
D0l2NxTuUquvwEaAN54SIUDSF44F04xd2nWtk7aJlCXpAObpwQK7CtpT3dU3DYzS
gclLsTej2WFglNhuZag04LE6GV6IBRQGfP8fSCWaQoxfo1RVFJ8ULGbgAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlaRagbZJP70gJZ37sgcAjxV9FlMB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaezktLk
jNNX7zsevkZQTg7Hsj5+5OEFFXizPC+xJJWcoac7nR51EZlgymZHhjgl8SPFZGr9
OCebodErkHdYKkKoD3cZTagkUO2baonPJhFpbFaD2E3XoUkeJ0+lz4hWBFEdHt4/
BDSl4K+41ECX+vCfA34TSCHXjMClyZ3tWGGG7SPy3wJKC5ANXRaPVRovxIhRLWQ8
iLrxodtjo7ZWPEVjg+CxHEynsFOlaAOl9A+Cj2kV7pyeTycN7XrDfVWSS+kySFrS
9i8nhcKemNH0eRKpRU4mQ3hSaXzPug3LKCRgQzOeX3uzKtUWJ/gqqLZAwMdMMJS6
5hqf6tTl9R0Y/A==
-----END CERTIFICATE-----
Generated at Mon May 12 17:09:42 2025 by rpki-client